Skip to main content
Applies to BloodHound Enterprise and CE Labels let you tag groups of objects for easier searching and filtering. Use labels to mark objects with common characteristics (e.g., “PCI”, “Owned”, “Production”). You can filter views and queries based on labels. For example, label PCI-scoped systems to quickly identify attack paths from non-PCI to PCI environments.
Unlike zones, BloodHound does not use labels in risk analysis—they’re designed to help you organize and query your data.
The Labels tab offers two views:
  • Summary View
  • Detail View
The Summary View shows label names, selector counts, and member count.Privilege Zones summary view

Create a label

Creating a label involves configuring the label details and defining a selector.
1

Open the Privilege Zones page

In the left menu, click Privilege Zones > Labels > Create Label.
2

Configure initial label details

Enter all relevant information about the label:
FieldRequired?Description
NameYesA unique name for the label (e.g., PCI)
DescriptionNoA brief description of the label’s purpose and scope (e.g., PCI assets)
Configure a new privilege zone label
3

Define a selector

Click Define Selector to save your new label and continue on to define the objects to include in the label.
See Selectors for more detailed information about defining selectors and using certification to control expansion behavior before you create a zone or label. The content in this section provides a high-level overview only.
When defining a selector during the label creation process, provide the following information:
FieldRequired?Description
NameYesA unique name for the selector (e.g., PCI)
DescriptionNoA brief description of the selector’s purpose and scope (e.g., PCI assets)
Selector TypeYesThe type of selector to use (e.g., Object ID or Cypher)
Define a selector for the privilege zone label
4

Complete label creation

Click Save to finish creating the label.

Edit or delete a label

To edit or delete an existing label, follow these steps:
1

Select a label

Navigate to the Privilege Zones page, select the label you want to edit or delete, and click Edit.
2

Edit or delete a label

Choose one of the following actions:
  • Edit a label
  • Delete a label
To edit the label:
  1. Modify the label’s name and description.
  2. Click Save Edits to apply your changes.